1047c20bb94d2e192e678ceef9a2f930_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

1047c20bb94d2e192e678ceef9a2f930_NeikiAnalytics.exe
Size

1020KB
MD5

1047c20bb94d2e192e678ceef9a2f930
SHA1

36e218e7ebdfbd1cf2099d83b28683d2964ff3ef
SHA256

4facdaaca589cc0ca58eb6ebf9d33e6fd63c977ac5b436c25a87e70193833370
SHA512

afe64a8a112cbdca23b6418652a4750cdac7fdf443e80da9f076836189623b81d9456b7d7b151a083b05a008a753854814f87281ff026e2f7662a3ba643fe608
SSDEEP

12288:+kFD7aRQCGSAqcPPO4yL8XVOfe8JRQaclH5NdMvJieBqxUUKjmX:+OhC/MRI8XAGFH7dL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1047c20bb94d2e192e678ceef9a2f930_NeikiAnalytics.exe

Files

1047c20bb94d2e192e678ceef9a2f930_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Core\obj\AWSSDK.Core.NetStandard\Release\netcoreapp3.1\AWSSDK.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1017KB - Virtual size: 1017KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ